Early warning signals
Indicators that stock exchanges, depositories and clearing corporations monitor to catch a stock broker's deteriorating finances or diversion of client securities early, triggering joint preventive action.
In plain language
When a broker misuses client securities — pledging them for its own borrowing, moving them to its own accounts — the damage is usually discovered only when the broker defaults, and by then clients' shares are gone. Early warning signals are SEBI's attempt to catch the pattern while there is still something to protect.
The idea is to watch for the symptoms that tend to come before a diversion: a sudden fall in net worth, repeated pay-in shortfalls, dormant accounts coming to life, large off-market transfers. None of them proves misconduct; together they tell the exchanges and depositories where to look first.
How it works
The framework (Chapter 12, SEBI circular of 17 December 2018). SEBI issued guidelines on early warning mechanisms to prevent diversion of client securities. Thresholds for the signals are decided by the stock exchanges, depositories and clearing corporations in mutual consultation.
The signals.
| Group | Examples |
|---|---|
| 1. Deteriorating financial health | Significant reduction in net worth over the previous half-year or year; significant losses; delay in reporting annual report, balance sheet, internal audit or Risk-Based Supervision data; failure to give information on related-party dealings; significant MTM losses on proprietary or related-party accounts; repeated pay-in shortages; large exposure, loans or investments in related parties; sudden activation of dormant client accounts; many UCC modifications; resignation of statutory auditors or directors |
| 2. Pledge-related (identified by depositories, shared with exchanges) | Multiple proprietary demat accounts or a new broker-name account for client purposes; movement of shares between many client accounts and proprietary accounts; large off-market transfers not for settlement; invocation of pledges by lenders; significant depletion of the client securities account |
| 3. Complaints | Rising complaints of unauthorised trading or delivery instructions, non-receipt of funds and securities |
| 4. Risk-Based Supervision / Enhanced Supervision alerts | Unrecovered debit balances; large dues to credit-balance clients; failure to upload weekly client-funds data for 3 consecutive weeks; pledging securities of credit-balance clients for own use; mis-reporting; significant rise in RBS score |
| 5. Terminals | Broker's terminal disabled for a number of days in any segment or exchange in the previous quarter |
Preventive action. If the analysis establishes deteriorating financial health and/or unauthorised transfer of client funds or securities, the exchanges and depositories jointly act.
- Stock exchanges may: block a percentage of collateral towards margin; check the securities register; check funds and securities with the clearing member, clearing corporation and depository; limit proprietary trading; shorten running-account settlement; meet the broker's designated directors; deactivate terminals uniformly across exchanges; inspect; cross-check against independent sources; appoint a forensic auditor where diversion is suspected.
- Depositories may: freeze the broker client account for debits; impose 100% concurrent audit on the depository participant; restrict use of the clients' power of attorney to that client's settlement obligations, with off-market deliveries by electronic instruction or DIS.
A worked example
Illustrative facts. Malabar Stock Broking Pvt Ltd files its half-yearly data. The exchange's surveillance team lines the numbers up against the signal list:
| Data point | Previous | Now | Signal |
|---|---|---|---|
| Net worth | Rs 18.0 crore | Rs 11.0 crore | Group 1 — a 39% fall in a half-year |
| Pay-in shortages this quarter | 0 | 4 | Group 1 — repeated |
| Dormant client accounts reactivated | 40 | 1,200 | Group 1 — sudden activation |
| Off-market transfers from client pool account (not for settlement) | Rs 2 crore | Rs 38 crore | Group 2 — large value |
| Weekly client-funds upload | On time | Missed 3 weeks running | Group 4 |
Fall in net worth = (18.0 − 11.0) ÷ 18.0 = 38.9%
The exchange and the depository act together:
- the depository freezes the broker client account for debits, so no further client securities can be pledged, and imposes 100% concurrent audit on Malabar's DP operations;
- the exchange blocks a percentage of Malabar's collateral, caps proprietary trading, meets its designated directors, and — because diversion is suspected — appoints a forensic auditor;
- client off-market deliveries now need electronic instructions or DIS, not the broker's power of attorney.
If Rs 38 crore of client shares had already moved, the forensic audit traces where; if not, the freeze has protected them before a default.
Why NISM asks about it
Chapter 12 (SEBI (Stock Brokers) Regulations, 2025), 6% of the paper, lists the signals and the preventive actions under the heading on early warning mechanisms.
Expect list-recognition questions ("which of the following is an early warning signal") and "who acts" questions — the exchanges and depositories jointly, with thresholds set by exchanges, depositories and clearing corporations in mutual consultation.
Common exam traps
- SEBI does not fix the thresholds. They are decided by the stock exchanges, depositories and clearing corporations in mutual consultation.
- Pledge-related signals are identified by the depositories and shared with the stock exchanges.
- Signals are not findings. Preventive action follows analysis that establishes deteriorating health or unauthorised transfer.
- Freezing the broker client account for debit is a depository action; blocking collateral and limiting proprietary trading are exchange actions.
- "3 consecutive weeks" of missed weekly client-funds uploads is the specific Enhanced Supervision trigger.
- Resignation of statutory auditors or directors is itself a signal.
- The list of actions ends with "any other measure as they deem fit" — it is not exhaustive.
Where this is taught
Free preparation for NISM Series III-ARelated terms
- Margin pledgeThe only permitted way for a client to give securities as margin — a special pledge created in the depository system that leaves the shares in the client's own demat account instead of transferring them to the broker.
- Unique Client CodeThe single code a broker assigns to a client once KYC is complete, mapped to that client's PAN and demat account, under which every one of the client's orders must be entered on the exchange.
- Capital adequacyThe minimum net worth an intermediary must have to be registered and must keep while registered — e.g. Rs 50 crore for a Category I merchant banker, Rs 75 crore for a custodian, Rs 10 crore for a debenture trustee.
- Dual reporting lineThe compliance officer's two reporting duties — to the board of the entity that appointed him, and, for any non-compliance of the SEBI Act or regulations, immediately and independently to SEBI.
- Depository participantThe SEBI-registered agent through whom an investor reaches a depository — NSDL and CDSL cannot open investor accounts themselves, so every demat account is opened and operated through a DP.
- Trading memberA member of a stock exchange who trades on behalf of clients or on his own account, under a trading member ID shared by all his registered users — and who must clear through a clearing member.
- ComplianceThe set of actions by which securities market intermediaries and issuers conform to the rules of SEBI, the exchanges, the depositories and their own boards — records, policies, reports and submissions.